1 ' 


MD 


MD 








A 

Diaf 
# 


Wife 


Search Query 


DBs 


Default 

Onpratnr 


Plurals 


Time Stamp 


: 


V:Y : jo 




/US-PGPUB; 

IJ^PAT' := 

::Wjrtt:l:f::::::::::: 


Or 


ON : ,: • 


2005/05/08; 15:<46- 


^"ideniah.of : seiyice ! V or : ; 

:; Hipnial4l1 : nft-1 : CArvipP' QaiTiP :::: ^ ;::::::: ^ : ^ ::::: 

;rUCI ilQl^UKJl ^> J.3CI VIWC OCll IIC::::::::::::::::-::::;:' 
















(collector or agent) ; ; 


EPO; JPO; ; : 












DERWENT;: 
IBM TDB : 








S2 


9 


"denial of service" or 
deniaI$lof$lservice with (intru$4 
near2 detectt) 


US-PGPUB; 
USPAT 


or 


ON 


2005/05/08 15:47 


■ $3 ":; 




: "denja!: of s^^ 
:denial$Xof$lseiViee 
(anomaly$lbasetf :pr:(anpmaly / 
i;nelar2:detect$3)); • : 


US-PGRUB; : 
: USP/Vt; ii- 

EPO; JPO;: 
: DERWENT;: j 

i'BMi=TDB : iii : : 

:: AUI , 1: WW;::::;: 


i : QR : ':- ! :.j|jij 


0N : 


; 2005/05/68-16:26: 


S5 


2 


((intru$4 near2 detect$3) or 
denial-of-service or "denial of 
service") with bucket 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2005/05/08 16:26 


S10 


':. : :;--'2' 


(denial-of-service or "denial of 

:: s'eiviGe" : \ : with : iEQunteh ::::::::::::::::::::::: 


US-PGPUB; 
USPAT- ^ 


OR 


ON ;•: 


2005/05/08 16:26 








EPO; JPO;: 
DERWENT; 

iBM : TDi : 








Sll 


13 


(denial-of-service or "denial of 
service") same redundan$2 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR . 


ON 


2005/05/08 16:26 


.:si2,, : 




, ("6^5li568^) r PN^': .; : ; ;l 


USPAT; iL; : 
USOCR 




: :OFF:| ; 


: 2004/10/24:15:54] 


S13 


1 


("20020131366").PN. 


US-PGPUB; 

USPAT; 

USOCR 


OR 


OFF 


2004/10/24 15:54 


S14 


• ; - 1 


("6662230").PN. 


USPAT; 
USOCR : 


: OR 


OFF 


: 2004/10/24 15:54 


S15 


28 


"denial of service" or 
denial$lof$lservice same 
(collector or agent or sensor or 
inspector or actuator) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2005/05/08 16:28 


$16 


::i : ;^18j 


:;(denial-of-seryice or "denial of : 

^ervit^" or;(irttrU!f;3 near 

; detect$3)) sameT^undan$2 ; 


US-PGPUB;:: 

USPAT; ': i 
EPO; JPO;: 
DERWENT; 


;:"or - ;; ;. : 


ON ..1 


2005/05/08 16:30 
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S17 


13 


redundan$2 with (harden$3 near2 
network) 


US-PGPUB; 
USPAT; 
EPO; JPO; 

DFRWFNT" 

IBM.TDB 


OR 


ON 


2005/05/08 16:31 


sis 


M "!;=;; :: : -;2i 


hUS-5231593-$JDIDvlOR :L:;; : I h :! !! : : 


USPAT] 






.2O0^ip/27|:l4:M; 






; ; US^321263t$;pip;iy;;:i: . 










S19 


810 


("denial of service" or 
oeniai$ior$iservice or (intru^o 
near detect$3)) same (collector or 
agent or sensor or inspector or 
actuator or sniffer) 


US-PGPUB; 

1 ICDAT- 

UbrA 1 , 

EPO; JPO; 
DcRWcIni; 

IBM_TDB 


OR 


ON 


2004/10/27 15:04 


S20 




/("denial: of service!* or 'k 


i US-PGPUB;^ 




ON | 


== 2005/05/08 14:31 




denial^ iof$lservice or (irithu$3 








; uspat ; ; 


























near ;detect$3)); same, (collector or 


EPO; JPO; 












: agent or inspector or actuator or 


; DERWENT; : 
IBM_TDB : : 












sniffer) 








S22 


18 


"6088804".URPN. 


USPAT 


OR 


ON 


2005/05/08 16:33 




; -: : ;;:;;n7027 : ; 


713/150-153>188,201;709/224. : : 


US-PGPUB; 
USPAT ; 




[QN-p 


'■ 2004/10/29 21:00: 


S24 


3516 


713/150-153 / 188 / 201;709/224. 

LLlb. dllU ^UJNcCl^O Or aUQIL-JO Ol 

log$4 or monitor$3) near3 
(network or traffic or secur$3 or 
statistic$2 or count or packet)) 


US-PGPUB; 

1 ICDAT 
UorA 1 


OR 


ON 


2004/11/03 13:04 


: S25 


: ; ;-;i;j;i:382!' 


^(713/150^153^ 

; eels; and ((collect$3 or audit$3 or 
log$4 or monitor$3) hear3 
(network or traffic or secur$3 or 

|;^tjstic!f;2ip^ 


US-PGPUB; : 

USPAT : : pi: 1 


;;OR .. , 


PN i 


2004/10/29 21:06; 
















^rid (tdeniai of seryic^ 6rl J; 
;dehial$lof$lservice or (iritru$4 
: hear2 detect$)) ; : 










S26 


220 


((7i3/i50-i53,i88,20i;709/224. 

eels, and ((collect$3 or audit$3 or 
log$4 or monitor$3) near3 
(network or traffic or secur$3 or 
statistic$2 or count or packet)) ) 
and ("denial of service" or 
denial$lof$lservice or (intru$4 
near2 detect$))) and (collector or 
agent or sensor or inspector or 
actuator) 


US-PGPUB; 
USPAT 


OR 


ON 


2004/10/29 21:06 


S27 : 


; : • i7o 


((713/15P'153488 / 201;709/224- : 
eels* and ((cpllect$3 or audit$3 or 
log$4.or monitor$3) near3 . : • ■= 

.(rietwo^ 

;:st|ti^f$2^ 

i dl lU: V VlCllldl Ol ;:bcFVICC; : :Qr::;::: :::: : 

; : deniaj$lof$l^ryice or (intrii^ih:; 
:;ne?r2 detejrt$))j. apd ;(coil^torior : 
aigent or misb^6r;or:a^ : i - 


us>gpub;;: 

USPAT 


OR ; 


ON 


2004/10/29 21 :09i 
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S28 


43 


(((713/150-153,188,201;709/224. 
eels, and ((collect$3 or audit$3 or 
log$4 or monitor$3) near3 
(network or traffic or secur$3 or 
statistic$2 or count or packet)) ) 
and ("denial of service" or 
denial$lof$lservice or (intru$4 

npar2 and (rnllprtor or 

agent or inspector or actuator)) 
and @ad< 20000907 


US-PGPUB; 
USPAT 


OR 


ON 


2005/05/08 16:34 












p 


N 




•2005/05/08 16:38 


















;;i : ; r 




(c6mbih$3 or divid$3:br split$4); ; 
















i^samei^paicket ! : 














S16 
2 


3519 


713/150-153,188,201;709/224. 
eels, and ((collect$3 or audit$3 or 
Iog$4 or monitor$3) near3 
(network or traffic or secur$3 or 
statistic$2 or count or packet)) 


US-PGPUB; 
USPAT 


OR 


ON 


2004/11/03 13:04 


S16 


; s 


S162 and (bucket: nearS 


US-PGPUB; 




On! 




2005/05/08 16:40 • 






(combin$3 ordivid$3br split$4) 
with (threshold or limit)) : ; 


USPAT : 7 : 






































S16 
8 


0 


S162 and ((IP near3 fragment$5) 
with ("denial of service" or 
denial$lof$lservice)) 


US-PGPUB: 
USPAT 


OR 


ON 


2005/05/08 16:41 


S16 




:;S162;ahd:((iPinear3frag 

jiwith pack3et^>"j=l!i!:=|::- : 


us-pgp:ub;: 


•OR'-;::-:;:::: 


j;G 




: 2005/05/08: 16:41 ! 


9 




USPAT- : 










S17 
2 


0 


((mtru$4 near2 detect$3) or 
denial-of-service or "denial of 
service 1 '^ same (reload near2 
request) 


US-PGPUB; 
USPAT 


OR 


ON 


2005/05/08 16:43 


: m 


ii::,15. 


(bucket n^ar5.((i;brhbin$3 or 
; divid$3 or split$4)); same flow and . 


US-PGPUB;! 
USPAT - ; 


■;PR:;;!.; 


:!G 


iN: 




2005/05/08 16:44;: 




















;;hash$3- :: .. 














S17 
5 


7 


(IP near fraoment45^ with attack 


US-PGPUB 


OR 


0 


N 


2005/05/08 16-45 


S17 


; l 


(overlapping riear2 fragment$5) 


US-PGPUB; 


liiiiii 


on ,; 


2005/05/08 16:46 






with attack : : 


USPAT 










S17 
7 


l 


("6381601").PN. 


USPAT; 
USOCR 


OR 


OFF 


2004/11/03 20:09 


S17 


: • = = 1593! 


; bucket; nearS (diyid$3 or split$4 or i 


:US-PGPUB;. 


iiii iii 


-on : 


2004/11/03 20:10 


:.9Jv ' 






USPTVT;: i- 
















EPO; JPO;;; : 
DERWENT; 
















IBMiTDB : ;.: 










S18 
0 


87 


bucket nearS (divid$3 or split$4 or 
combin$3) same hash$3 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2005/05/08 16:47 
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S18 
3 


1 


S18 
4 


' : -:82:: 


S18 
5 


38 


S18 

6 


12 






S18 
7 


37 


S18: 


. 26 


;8 




S18 
9 


27 


• S19 

o ; 




S19 

1 
1 


3 


ii9;; ; 

2 


V. .2 


S19 
3 


2 



("6304262").PN. 

^("denial of service" or ;: K : : 
: denial$l6f$is^rvicei o|;|ihtru$3 X 
near detect$3)) same : (collector or 
;ageht orinspectoror actuator or 
i sniffer) ; 

S184 and (@ad<"20000907" or 
@rlad<"20000907") 



S185 and ((redundant .or. private 
or dedicated) near3(network or 
line)) : ; ■■: : iT,:{ii;A- '. 



("denial of service" or 
denial$lof$lservice or (intru$3 
near detect$3)) same ((redundant 
or private or dedicated) near3 
(network or line or channel or 
tunnel)) 



S187 and..(@ad<'!20000907" or 
!^rlad<"20fjb9d7^) ;;i;r 



"denial of service" or 
denial$lof$lservice same 
(collector or agent) 



"denial of service?' pril; • 
denial$lof$lservice with (intru$4 
near2 detect$) ■■■■ 

"denial of service" or 
denial$lof$lservice same 
(a noma ly$l based or (anomaly 
near2 detect$3)) 

denial-of-seryjce 6r:"deniai: of : : 
jseryice") with -ibucloBti|l : 



(denial-of-service or "denial of 
service") with counter 



USPAT 

US-PGPUB; 
USPAT; : 
EPO; JPO; : 
DERWENT; 
IBM_TDBI 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 

US-PGPUB; 
USPAT; : 
EPO; JPO; ; 
DERWENT;: 
IBMlTDB : ; 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



US-PGPUB; 
USPAT; r V 
EPO; JPO; 
DERWENT; 
IBM_TDB ; 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



US-PGPUB; 
USPATi ; i ::r 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



US-PGPUB; 
USPAT; ■■' 
EPd;JPbi:! 
DERWENT;^ 
; IB^_TbB ; : 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



OR 
OR 



OR 



OR 



OR 



OR: 



OR 



OR 



OR 



OR: 



OR 



OFF 
ON 



ON 



ON 



ON 



;ON 



ON 



ON: 



ON 



ON;! 



ON 



2004/11/04 11:55 
; 2605/057p8 14:35- 



2005/10/04 11:57 



2005/05/08 14:33 



2005/05/08 14:35 



2005/10/0412:28 



2005/10/04 14:46 



2005/05/08 15:47; 
2005/05/08 16:26 



2605/10/0414:52 



2005/05/08 16:26 
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S19 
4 


16 


(denial-of-service or "denial of 
service") same redundan$2 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2005/05/08 16:26 


•S19: 

5j!" ' 


■ . ' 33|; 


; .'.'denial of seivice": or ^ 
dehial$lof$lservice same 


US4>GPUB;1 
.USP^AT; .= • •=: 


:OR 


ON; •'!:;: 


; ::2;00 : 5/id/64^i:4:5 : $; 






(collector or agent or. sensor or 
: inspector or actuator) : 


: - EPO; JPO;!: 
DERWENT;:: 














: IBM_TQB:: : :; 








S19 
b 


21 


(denial-of-service or "denial of 
service or (intru^o near 
detect$3)) same redundan$2 


US-PGPUB; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2005/05/08 16:30 


S19]:r 
7 • 


H ; :iM :: hr:- : 13 ; - 


;|redi#)an$i2;w^ 
n^ork) V;. 


; US-PGPUB;: 
: USPAT; 
EPO; JPO;: 


or : : : 


ON 


2005/05/08: 16:3* 




















DERWENT; : 
i;IBM_TDB: : 








S19 
8 


20 


"6088804 n .URPN. 


USPAT 


OR 


ON 


2005/05/08 16:33 


;S19 




; (((7l3/i50fi 

eels; and ;((cpllect$3 or audjt$3 or ; : 
lo^$4 or moriitof$3) riear3 • 
(network or traffic or secur$3 or 
: sdtistic$2 or tpuntipr packet)) ) ; 
::&n : d ("jfefiiai d^seryicfc" bri" ; 
: denial$lbf$lservice or (iritrii$4 
near? detect$))) ; ;and (collator or : f 
agent or inspector or actuator)) : 
andi@ad<;^^ 


: r US-PGPUB;;: 
!:USfAT •: '•; 


: dR'::;;:' 


rpN;::::;;;:: 


!; 2])05^0/04 15:02 : 


S20 
0 


12 


bucket with threshold same 
(combin$3 or divid$3 or split$4) 
same packet 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM.TDB 


OR 


ON 


2005/10/05 11:18 


i 




713/150-153488,2011709/224.: : 

^l$/:ahd:i((^ or audit$3 or : : 
I6g$4 or:mdriitbr$3) near3 !;'■'" 
(network or traffic or secur$3 or : 

:statistic$2 or count or; packet)) ■! 


luS-PGPUB; 

:;yspAj 




HON 


2d65/d5/68 : i6:4d; 


S20 
2 


5 


S201 and (bucket nearS 
(combin$3 or divid$3 or split$4) 
with (threshold or limit)) 


US-PGPUB; 
USPAT 


OR 


ON 


2005/05/08 16:40 


S20 

: 3.;.';;;. 


\ 0 


S201 arid ((IP :; near3:fra • 
with ; ("denial ;pfs^ 
derifc!$ibf$l^ ; 


^US-PGPUB; : 

;USPAT;=:;. iii : 


: :bR : !;-:;;;j . 


;:QN 


2005/05/68 16:41:! 


S20 
4 


48 


S201 and ((IP near3 fragment$5) 
with packed) 


US-PGPUB; 
USPAT 


OR 


ON 


2005/05/08 16:41 
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S20 
5 


0 


((intru$4 near2 detect$3) or 
denial-of-service or "denial of 
service") same (reload near2 

rani 


US-PGPUB; 
USPAT 


OR 


ON 


2005/10/03 12:20 


: S20. •:. 

L 6 J; ■■■ 


;16 : ; 


(bucket near5 : Xcprnbin$3; or ; 
divid^3 6ti split^4)j: sa me ; ;flow and 


^US-PGPUB;::; 

uspat : • 




ON; ;•; 


2005j5/0|^;44i ; 


S20 
7 


15 


(IP near fraament45^ with attack 


US-PGPUB; 
USPAT 


OR 


ON 


2005/05/08 16:45 


S20 


•.' : J -;2i! 


; ; (6yer$l la ppt ri g ; nea r2 i fra g ment| 5 ) ; : : : 


FUS-PGPUB; : 
.•USPAT : . 


•or 'M 


ON ; ;;; !: 


2005/05/0816:46 






with attack • 








S20 
9 


89 


bucket nearS (divid$3 or split$4 or 
combin$3) same hash$3 


US-PGPUB; 
USPAT; 
crU; jpu; 

HCDW/CMT' 

UfcKWfclN 1 , 
IBM_TDB 


OR 


ON 


2005/05/08 16:47 


::s2i ::: ; 


. 10539 












((iritru$4near2 detect$3) or : 


US-F?GPUB;:: 


::OR:,-::::: :: ::i. 


ON 


2005/10/03 14:23: 






deriial-of-service or "denial of 


USPAT; : 












' service") ; • 


:USOCR; ; : 
• EPO; JPO; 
iDERWENT; 
1 IBMJTDB 








S21 
4 


5925 


S213 and (@ad< n 20000907" or 
@riad<"20000907") 


US-PGPUB; 
USPAT; 
USOCR; 
EPO; JPO; 
DERWENT; 


OR 


ON 


2005/10/03 13:11 


S21 
5 


608 


S214 and ((separate private; : : : 
idedi(itediinternal)inear2:(chanriel:: 
inetiwrki path;l|ne;connectipn)) 


US-PGPUB; 
USPAT;:: 
USOCR;:- : 


OR 


ON; 


2005/10/03 15:20 








EPO; JPO; 
DERWENT; 








S21 
6 


34 


S215 and ((data near3 collect$3) 
with (packet traffic)) 


IBM.TDB 

US-PGPUB; 
USPAT; 
USOCR; 
EPO; JPO; 

r\cri\ a/civ it. 

DERWENT; 
IBM_TDB 


OR 


ON 


2005/10/03 12:52 


S21 


, 93 


:S215 : and (comW^ heart : 

availab$5)!jj!='ji:ij:-:jjj=:!=:'!- :H :.H 


US-PGPUB; 

:iUSPAT;:;: : 


OR 


ON 


2005/10/03 14:03 








USOCR; 
EPO; JPO;:; 
DERWENT; 














IBMiTDB:': . 
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S22 
1 



522. 

l2M 

S22 
3 

S22 
4 

S22 
5 

6-;; 

S22 
7 

S22 
8 



15 



62 



49; 



59 



((separate private dedicated) 
near2 (channel network path line 
connection)) same 
((communication system 
function$6) near4 (availab$5 
isolat$3 cut) with (important 
critical)) 

(!!6501752^PN,::;i 



((intru$4 near2 detect$3) or 
denial-of-service or (denial near2 
service)) and cisco.as. 



5223 and "(@ad<?20000907? or ; 
^rlad<"200009D7") : ; ; 

5224 and director and sensor 



S224:ahd ((separate private 
dedicated internal) near2 (channel 
network path line; connection)) : 

S224 and ((redundan$2 
emergency) near2 (channel 
network path line connection)) 

S214 and ((redundan$2 
emergency) near2 (channel 
network path line cdnnectibn)) ; 



US-PGPUB; 
USPAT; 
USOCR; 
EPO; JPO; 
DERWENT; 
IBM TDB 



US-PGPUB; 

uspJvri ; ; 



US-PGPUB; 
USPAT 



US-PGPUB; 
USPAT: 



US-PGPUB; 
USPAT 



USrPGPUB; 
USPAT 



US-PGPUB; 
USPAT 



US-PGPUB; 
USPAT; 
USOCR; 
EPO; JPO; 
DERWENT; 
IBM TDB 



OR 



OR 



OR 



OR 



OR 

or; 



OR 



OR 



ON 



OFF 



ON 



ON 



ON 



ON 



ON 



ON 



2005/10/03 13:16 



2005/10/03:14:03 



2005/10/03 15:19 



2005/10/03 14:25 



2005/10/03 14:38 



2005/10/03.15:19 : 



2005/10/03 15:19 



2005/10/03:16:18 
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S23 
1 



S23: 

•2;, _ . 

S23 
3 

S23 

1. 

S23 
5 



S23 

6; : ::i: 



S23 
8 



S23 

9i 



50 



86 



39 



38 



27 



US- 
US- 
US- 
US- 
US- 
US- 
US- 
US- 
US- 
US- 
US- 
US- 
US- 
US- 
US- 
US- 
US- 
US- 

us- 
us- 
us- 
us- 
us- 
us- 
us- 



5796956 
6061341 
6061789 
6108782 
6279113 
6321338 
6353385 
6370116 
6388992 
6389448 
6442694 
6535484 
6597661 
6597957 
6678827 
6691213 
6725378 
6738814 
6775657 
6789203 
6807667 
6816910 
6848005 
6304262 
6301668 



OR 
OR 
OR 
OR 
OR 



-$.DID. OR 
•$.DID. OR 
-$.DID. OR 
-$.DID. OR 
-$.DID. OR 
•$.DID 
•$.DID 
•$.DID 
•$.DID 
■$.DID 
•$.DID. OR 
■$.DID. OR 
■$.DID. OR 
■$.DID. OR 
-$.DID. OR 
-$.DID. OR 
-$.DID. OR 
-$.DID. OR 
■$.DID. OR 
-$.DID. OR 
-$.DID. OR 
■$.DID. OR 
-$.DID. OR 
•$.DID. OR 
•$.DID. 



"20020031134" or!;'20020035628" 
or "20020095492" or ;.. 
Vi6020103916 !! 

("6381649").PN. 



("denial of service" or 
denial$lof$lservice or (intru$3 
near detect$3)) same (collector or 
agent or inspector or actuator or 
sniffer) 

S235 and (@ad<"20000907" or 
:@r!ad<2p00d9d7^1j| 



("denial of service" or 
denial$lof$lservice or (intru$3 
near detect$3)) same ((redundant 
or private or dedicated) near3 
(network or line or channel or 
tunnel)) 

S238 :: ah;d ; (te 
: @Had<"20ppp9b7 ,, ) : i:; 



US-PGPUB; 
USPAT; 
USOCR; 
EPO; JPO; 
DERWENT; 
IBM TDB 



US-PGPUB 



US-PGPUB; 
USPAT 

iUS-PGPUB; 
;USPAT: 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; : : 
EPO; JPO; 
DERWkNT; 
IBMiTDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; > 
EPO;iJPO;h 
DERWENT;: 
IBM TDBl :i 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



ON 



ON: 



OFF 



OFF 



ON 



ON 



ON 



ON 



2005/10/03 18:38 



2005/10/03 18:13; 

2005/10/03 18:43 
2005/10/03 18:43; 



2005/10/04 11:57 



2005/10/04 12:11 



2005/10/04 12:28 



2005/10/04 14:57 



Search History 10/14/05 12:58:56 PM Page 8 
C:\Documents and Settings\MDinh\My Documents\EAST\Workspaces\09931558 Monitoring Network Traffic for DOS Attacks.wsp 



S24 


29 


0 




: . J£Sj- • ■ ■ ; 


17 


1 I' 




S24 


35 


6 




. . Jt~ 


















S24 


61 


8 




S25 : 




: ; : p : i;;..;.; : i 








S25 


0 


1 




. : S25i : ;.. 


" 0 


•2 : ' ;; i:: :: ' 




S25 


13 


3 





"denial of service" or 
denial$lof$lservice same 
(collector or agent) 



i((intr : u$4 nie)(r2.detelcr43) of ', \_ : 
:denialK3f-seryjce : ;pf ^ "d^hial;:pf j; 
Service") same bucW;:^:. 

("denial of service" or 
denial$lof$lservice) same 
(collector or agent or sensor or 
inspector or actuator) 

;S246aiid;(@ad<' , 2PPP09P7" or; 
iriad<"2bpp69P^ ! ) . : 



(((713/150-153, 

188;726/22-25;709/224.ccls. and 
((collect$3 or audit$3 or log$4 or 
monitor$3) near3 (network or 
traffic or secur$3 or statistic$2 or 
count or packet)) ) and ("denial of 
service" or denial$lof$lservice or 
(intru$4 near2 detect$))) and 
(collector or agent or inspector or 
actuator)) and (@ad<"2PPPP9P7" 
or @rlad<"20P0P9P7") 



713/15P-153/:! ; 

188;726/22-25;7P9/224iccls. and 
;:((cpliect$3;or ;auditi3/cir!il6g$4or; 

monitbr$3) near3 (njetwork or 
^traffic ors^ 

count or packet)) and ; : 

(@ad<"20000907" or 
;;@r!ad<^P00P9C)7:!')l:; 

S25P and ((bucket buffer) near5 
(combin$3 or divid$3 or split$4) 
with (threshold or limit)) 

: S25p;and ((IP ^ near3fragment$5) 
: with ("denial of ^Service" or : 
denjal$iof$lserw^ 



S25P and ((IP near3 fragment$5) 
with packet$) 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAt; d;. ; 
EPO;iJPO; : 
DERWENT; 
iBMJTDBl 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



US-PGPUB; 

U : S : PAt# Hj: :: 
EPO; JPO; 
DERWENT; 
TBM_¥dB- ■ 

US-PGPUB; 
USPAT 



US-PGPUB; 
USPAT :;, 



US-PGPUB; 
USPAT 



US-PGPUB; 
USPAT : 7 



US-PGPUB; 
USPAT 



OR 



;or 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



ON 



ON 



ON 



ON 



ON 



ON ; 



ON 



ON 



ON 



20P5/10/04 14:47 



2005/10/04 14:55 = 



20P5/1P/P4 14:58 



2p05/10/p4ii4:58 



20P5/1P/P5 IP: 59 



2PP5/1P/P5 11:01: 



2005/10/05 11:03 
2005/10/05 11:04; 
2005/10/05 11:04 
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S25 


12 


4 




j>25 ; 


.::::::::::::::::::::::*::: 


.5: 




S25 


2041 


6 




S25 

; 7,;,!:i: 


■ 19 


S25 


1 


8 





bucket with threshold same 
(combin$3 or divid$3 or split$4) 
same packet 



( ?, 632l263?).PN 
poletto.in. or kohler.in. 
S256 and deniai and collector 
("6321338").PN 



US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 

US-PGPUB; 

USPAT:!; ; , 

US-PGPUB; 
USPAT 

US-PGPUB; 
USPAt! : 

US-PGPUB; 
USPAT 



OR 


ON 


or:: : ;:; 


;;idFF|;n- 


OR 


ON 


OR ' 


ON 


OR 


OFF 



2005/10/05 11:18 



2005/10/07 19:48: 
2005/10/07 19:50 
2005/10/07 19:5p 
2005/10/07 20:01 
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